Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F896A2A2CD5D11EF9766627B762E951A.roa
File: F896A2A2CD5D11EF9766627B762E951A.roa (raw, json)
Hash identifier: q9hDcs2LEY+gTSVRifKkfKBkOrALU4921eBwb/qCOhc=
Subject key identifier: 37:25:97:07:8C:12:D6:6C:EC:DF:81:B1:39:2C:7D:8B:94:9B:15:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF1B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F896A2A2CD5D11EF9766627B762E951A.roa
Signing time: Wed 08 Jan 2025 01:14:56 +0000
ROA not before: Wed 08 Jan 2025 01:14:52 +0000
ROA not after: Sat 13 Dec 2025 01:14:52 +0000
asID: 984
IP address blocks: 156.247.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65307 (0xff1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 01:14:52 2025 GMT
Not After : Dec 13 01:14:52 2025 GMT
Subject: CN=677dd190-7534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:04:cf:35:42:8f:dc:51:9c:74:24:eb:22:
07:6e:be:63:2c:1a:67:96:eb:1e:3a:2e:b4:73:e9:
09:9a:26:83:a5:98:b9:64:21:a6:b6:9e:68:13:9d:
a3:1f:fe:75:fe:74:80:2a:e9:ce:42:22:88:be:84:
b9:ed:5d:a4:cc:52:4b:de:08:c7:56:5e:88:aa:6c:
a6:68:70:70:b0:66:dc:28:cc:9b:43:06:ba:76:e4:
12:b7:a6:c8:29:d1:b7:a3:44:11:fe:af:d3:2d:4c:
bf:3d:7b:ad:98:45:4c:4e:29:1e:7c:18:09:66:38:
54:df:9a:bf:7c:50:3e:ab:19:ab:d4:91:0d:69:77:
e6:a6:bd:18:59:b8:2a:a6:85:ec:42:bf:8f:26:7a:
33:84:07:f8:9a:d5:62:57:0c:b0:96:7e:bb:3d:33:
97:a6:63:d4:a2:55:c6:24:21:58:cd:de:a9:6c:67:
a1:09:22:c0:47:4a:88:8b:17:f2:ad:41:e1:1a:77:
56:f3:dc:93:0a:40:5c:16:b5:bc:21:69:c9:08:35:
09:9f:fe:bd:74:0e:bb:f0:61:82:36:df:12:bf:9f:
38:53:2e:39:1c:1b:73:eb:d1:37:93:2e:1c:16:86:
d6:e2:1c:15:e6:67:31:d4:47:a2:6c:cd:d6:36:1c:
fc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:25:97:07:8C:12:D6:6C:EC:DF:81:B1:39:2C:7D:8B:94:9B:15:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F896A2A2CD5D11EF9766627B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.85.0/24
Signature Algorithm: sha256WithRSAEncryption
33:aa:26:65:06:e5:89:7d:97:4e:53:af:a4:57:86:b5:55:a9:
38:31:1c:8d:b6:08:69:25:74:8a:0e:ca:77:b2:40:98:4d:b4:
8a:5f:50:99:c6:8e:9c:3f:af:2e:cc:8b:ee:b2:d0:dd:f3:88:
c3:b4:54:97:41:13:44:92:2d:bb:9d:5e:84:13:a6:94:87:c0:
39:44:0d:26:b9:84:bc:c1:e7:c5:16:45:aa:de:55:13:4e:ac:
8a:9e:02:fd:3f:18:ea:d5:19:eb:97:d2:0a:a0:ab:de:4c:de:
30:60:32:60:7e:1b:68:f7:09:c2:65:ba:9e:4e:c5:26:3a:f7:
e6:5f:02:12:1a:e5:cf:34:2e:68:c4:23:64:d9:47:09:fa:d9:
95:b5:20:11:35:aa:89:7c:e0:c3:f1:c6:52:ed:2a:1e:78:e1:
3d:e3:d5:5c:f0:0a:28:33:50:f8:ad:06:10:ba:c4:43:90:b0:
52:5c:de:0a:e0:99:d2:8a:32:3f:f8:f2:ef:1c:b6:e9:2d:37:
68:bc:fc:95:0f:93:ef:99:6e:f9:8a:02:35:35:6f:05:b0:cf:
09:f9:39:f8:cd:71:d6:e7:0d:c9:89:73:3b:b0:24:3e:0f:ec:
4b:05:5a:1e:50:43:86:84:0e:ef:66:87:51:e6:5a:ce:4a:ac:
4c:71:d2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:04 2025 by rpki-client